Overview
overview
3Static
static
3123/AlitunWrap.dll
windows7-x64
3123/AlitunWrap.dll
windows10-1703-x64
3123/AlitunWrap.dll
windows10-2004-x64
3123/AmdVideo.dll
windows7-x64
3123/AmdVideo.dll
windows10-1703-x64
3123/AmdVideo.dll
windows10-2004-x64
3123/ErrorLog.exe
windows7-x64
3123/ErrorLog.exe
windows10-1703-x64
3123/ErrorLog.exe
windows10-2004-x64
3123/Qt5Quick.dll
windows7-x64
3123/Qt5Quick.dll
windows10-1703-x64
3123/Qt5Quick.dll
windows10-2004-x64
3123/Qt5Widgets.dll
windows7-x64
3123/Qt5Widgets.dll
windows10-1703-x64
3123/Qt5Widgets.dll
windows10-2004-x64
3123/defend12.dll
windows7-x64
3123/defend12.dll
windows10-1703-x64
3123/defend12.dll
windows10-2004-x64
3123/libcurl.dll
windows7-x64
3123/libcurl.dll
windows10-1703-x64
3123/libcurl.dll
windows10-2004-x64
3123/libeay32.dll
windows7-x64
3123/libeay32.dll
windows10-1703-x64
3123/libeay32.dll
windows10-2004-x64
3123/xmldbx64.dll
windows7-x64
3123/xmldbx64.dll
windows10-1703-x64
3123/xmldbx64.dll
windows10-2004-x64
3Analysis
-
max time kernel
136s -
max time network
111s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
24-08-2024 15:58
Static task
static1
Behavioral task
behavioral1
Sample
123/AlitunWrap.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
123/AlitunWrap.dll
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
123/AlitunWrap.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
123/AmdVideo.dll
Resource
win7-20240729-en
Behavioral task
behavioral5
Sample
123/AmdVideo.dll
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
123/AmdVideo.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
123/ErrorLog.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
123/ErrorLog.exe
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
123/ErrorLog.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
123/Qt5Quick.dll
Resource
win7-20240708-en
Behavioral task
behavioral11
Sample
123/Qt5Quick.dll
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
123/Qt5Quick.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
123/Qt5Widgets.dll
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
123/Qt5Widgets.dll
Resource
win10-20240404-en
Behavioral task
behavioral15
Sample
123/Qt5Widgets.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral16
Sample
123/defend12.dll
Resource
win7-20240705-en
Behavioral task
behavioral17
Sample
123/defend12.dll
Resource
win10-20240404-en
Behavioral task
behavioral18
Sample
123/defend12.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
123/libcurl.dll
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
123/libcurl.dll
Resource
win10-20240404-en
Behavioral task
behavioral21
Sample
123/libcurl.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral22
Sample
123/libeay32.dll
Resource
win7-20240708-en
Behavioral task
behavioral23
Sample
123/libeay32.dll
Resource
win10-20240404-en
Behavioral task
behavioral24
Sample
123/libeay32.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
123/xmldbx64.dll
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
123/xmldbx64.dll
Resource
win10-20240404-en
Behavioral task
behavioral27
Sample
123/xmldbx64.dll
Resource
win10v2004-20240802-en
General
-
Target
123/ErrorLog.exe
-
Size
7.7MB
-
MD5
be7ee08ca56b14960f6a07082674f52d
-
SHA1
35d5eadef68707f4d72de5f9ea30a6ef7ef05437
-
SHA256
756dbe00ad98963ddb2293c62d7ac562ffa588840c079ebcb0751d9944f97e53
-
SHA512
bdf08e29222e9547869d74a1474330b2bf242bc1c6cbc228032e862f79ed53583439bf354d2a7dd60b333f65457b889f506a0aaa374298d47295d7af03c8535d
-
SSDEEP
196608:07fdgM3TpmJlKb9K6aVUnhsKTC2gglNgr:07WYmw9PaineKTCggr
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ErrorLog.exe